Configure Layer 2 VPN Policing on Interfaces

You can use policing to control the amount of traffic flowing over the interfaces servicing a Layer 2 VPN. If policing is disabled on an interface, all the available bandwidth on a Layer 2 VPN tunnel can be used by a single CCC or TCC interface.

Layer 2 VPNs support only input policing. For more information about the policer statement, see the JUNOS Internet Software Configuration Guide: Policy Framework.

If you configure CCC encapsulation, then include the policer statement at the [edit interfaces interface-name unit unit-number family ccc] hierarchy level to enable Layer 2 VPN policing on an interface:

[edit]

interfaces interface-name {

    encapsulation encapsulation-type;

    unit 0 {

        family ccc {

            policer {

                input input-name;

            }

        }

    }

}

If you configure TCC encapsulation, then include the policer statement at the [edit interfaces interface-name unit unit-number family tcc] hierarchy level to enable Layer 2 VPN policing on an interface:

[edit]

interfaces interface-name {

    encapsulation encapsulation-type;

    unit 0 {

        family tcc {

            policer {

                input input-name;

            }

        }

    }

}

For information about how to configure the encapsulation type, see Configure the Encapsulation Type.